Adobe Magento Open Source

• CVE-2026-34648 High 7.5 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) 21.4%
• CVE-2026-34649 High 7.5 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) 13.6%
• CVE-2026-34655 Medium 4.8 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.4%
• CVE-2026-34654 Medium 5.3 Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) 0.6%
• CVE-2026-34651 High 7.5 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) 0.7%
• CVE-2026-34646 High 7.5 Adobe Commerce | Incorrect Authorization (CWE-863) 0.4%
• CVE-2026-21291 Medium 4.8 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.3%
• CVE-2026-21293 Medium 5.5 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) 0.3%
• CVE-2026-21282 Medium 5.3 Adobe Commerce | Improper Input Validation (CWE-20) 0.6%
• CVE-2026-21286 Medium 5.3 Adobe Commerce | Incorrect Authorization (CWE-863) 0.3%
• CVE-2026-21294 Medium 5.5 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) 0.3%
• CVE-2026-21284 High 8.1 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.4%
• CVE-2026-21297 Medium 4.3 Adobe Commerce | Incorrect Authorization (CWE-863) 0.4%
• CVE-2026-21359 Medium 4.7 Adobe Commerce | Incorrect Authorization (CWE-863) 0.2%
• CVE-2026-21309 High 7.5 Adobe Commerce | Incorrect Authorization (CWE-863) 0.6%
• CVE-2026-21292 Medium 5.4 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.3%
• CVE-2026-21310 Medium 5.3 Adobe Commerce | Improper Input Validation (CWE-20) 0.3%
• CVE-2026-21285 Medium 4.3 Adobe Commerce | Incorrect Authorization (CWE-863) 0.3%
• CVE-2026-21290 High 8.7 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.5%
• CVE-2026-21289 High 7.5 Adobe Commerce | Incorrect Authorization (CWE-863) 0.7%
• CVE-2026-21361 High 8.1 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.5%
• CVE-2026-21360 Medium 6.8 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 0.7%
• CVE-2026-21296 Medium 4.3 Adobe Commerce | Incorrect Authorization (CWE-863) 0.4%
• CVE-2026-21311 High 8.0 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.4%
• CVE-2026-21295 Low 3.1 Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) 0.3%